SSL Error: alert internal error

[Cantor, Scott]

On 7/29/13 4:33 PM, "Christopher Peters" <cjpeters at uci.edu> wrote:

>From the IDP side, there's not even a mention of a connection attempt.

I wouldn't expect it. Apache is in the way, so by definition if it's the
thing rejecting the connection, this isn't IdP related.

>2013-07-24 21:22:42 DEBUG XMLTooling.libcurl [18]: error:14094438:SSL
>routines:SSL3_READ_BYTES:tlsv1 alert internal error

A little searching indicates that's a protocol error due to a server not
negotiating the TLS version to use.

Ex: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/861137

The SP has never done much beyond just turning off SSLv2, but some very
old versions might have curl options set that cause issues with very new
OpenSSL versions.

But all of this demonstrates the fact that you had a change to OpenSSL
ready to take effect. That's what broke it, not the upgrade.

>On our end, all we have is:

That's an access log, not a debugging log.

-- Scott